General

  • Target

    abb94c98eee8f40151b58809fe3c72a6326561cba0748101ada70136c35dae4bN

  • Size

    72KB

  • Sample

    240917-vvhglsvcpc

  • MD5

    07e04c71e6043e93c3a6c8888645f340

  • SHA1

    245832f9af3a824066de77b435336de702d7185e

  • SHA256

    abb94c98eee8f40151b58809fe3c72a6326561cba0748101ada70136c35dae4b

  • SHA512

    395402f2b48c3deb4ae6f1615fec4fbff3cd32edf9310d1378cb79e5c708865c2c1b2860ea69912704486f970ade2064ad9a51a0c282293adfc033a1330d1ddd

  • SSDEEP

    1536:I5f+Om6qsNM79wrK8OFmDXrYDD3Mb+KR0Nc8QsJq39:2+z61mhwmpmD76D3e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

101.17.94.206:8272

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

    • Target

      abb94c98eee8f40151b58809fe3c72a6326561cba0748101ada70136c35dae4bN

    • Size

      72KB

    • MD5

      07e04c71e6043e93c3a6c8888645f340

    • SHA1

      245832f9af3a824066de77b435336de702d7185e

    • SHA256

      abb94c98eee8f40151b58809fe3c72a6326561cba0748101ada70136c35dae4b

    • SHA512

      395402f2b48c3deb4ae6f1615fec4fbff3cd32edf9310d1378cb79e5c708865c2c1b2860ea69912704486f970ade2064ad9a51a0c282293adfc033a1330d1ddd

    • SSDEEP

      1536:I5f+Om6qsNM79wrK8OFmDXrYDD3Mb+KR0Nc8QsJq39:2+z61mhwmpmD76D3e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Enterprise v15

Tasks